This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json) Hash identifier: mMne8kQJCfk9AznW+CFUHrtldCYBS1gHa3/OXvj7BkQ= Subject key identifier: F4:2F:57:47:F4:05:08:22:A8:87:9E:7A:0E:6A:9B:19:79:DC:D6:AB Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60 Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60 Certificate serial: 019B4438B8A305A422C4298C260D2F962C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 04:02:06 +0000 Manifest this update: Mon 22 Dec 2025 04:02:06 +0000 Manifest next update: Tue 23 Dec 2025 04:02:06 +0000 Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=) 2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: /cWAHL5M4lqEX5su9/JdeL8h2GC8DZAGqsm+GBOZMuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:b8:a3:05:a4:22:c4:29:8c:26:0d:2f:96:2c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60 Validity Not Before: Dec 22 04:02:06 2025 GMT Not After : Dec 23 04:02:06 2025 GMT Subject: CN=f42f5747f4050822a8879e7a0e6a9b1979dcd6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:17:6a:e2:cb:5e:b6:80:86:02:3d:67:62: 34:f8:3b:df:19:2e:ba:48:1b:a4:e9:61:cc:d3:4f: fd:33:64:01:24:9f:ba:bb:09:1c:95:2c:20:4c:57: 98:84:36:da:90:b6:b4:5d:74:a1:52:92:37:8b:ee: a1:e4:a6:38:69:04:8f:5e:c8:86:e2:c4:ee:8c:50: d0:d9:08:7e:91:10:af:80:33:fe:cd:f4:a5:78:4b: 3f:72:f4:08:0c:63:5f:8b:f9:69:a2:33:23:e3:73: 6a:8d:c1:d4:2b:97:fc:b6:2e:ee:fe:d6:c1:04:93: 7f:6b:db:ba:6b:bd:78:56:3f:50:0a:3d:11:14:60: 10:c8:b5:ce:5b:c5:03:d7:ad:9f:36:67:8a:10:fb: 18:9b:83:fc:0f:0d:c4:69:f8:dc:72:5b:d5:11:38: a2:1f:54:bc:ef:58:b8:e3:22:48:ad:6c:a1:c6:24: 6d:68:e4:2c:13:da:8b:de:03:25:dc:7e:eb:e4:4a: 0f:98:8b:1f:bb:7d:66:e7:84:74:09:6a:65:b6:5e: 11:05:ca:59:dd:e9:c7:df:d0:86:cf:27:5d:a6:1a: 93:82:41:ee:d3:cb:d3:94:08:5e:c0:c2:37:f1:27: b6:dc:b7:ca:c4:e8:55:4b:e9:6b:9b:2b:4c:dd:31: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2F:57:47:F4:05:08:22:A8:87:9E:7A:0E:6A:9B:19:79:DC:D6:AB X509v3 Authority Key Identifier: keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:0d:78:74:23:27:02:76:fd:35:35:ea:2f:bf:2b:e8:14:68: ef:da:9a:d9:0d:ed:ae:3d:69:8f:ce:fe:9a:5d:d6:9c:5e:88: a4:82:6b:f5:ca:2c:10:fa:41:19:54:53:a6:45:dc:fb:aa:0e: 01:43:fc:8e:30:af:38:a7:c0:eb:7f:68:7e:d4:33:8c:6e:57: 97:c8:0b:51:22:c7:a5:29:ef:b6:13:d7:54:2d:11:34:86:a0: 91:2c:d6:9e:86:4e:ce:fb:53:4f:a0:fc:13:9b:a3:e9:d3:05: 12:00:9b:3d:e1:9f:b3:42:d0:33:c1:65:ea:fe:c0:7d:5d:e5: 00:31:6f:15:34:b8:35:96:71:34:ff:95:76:56:50:2d:3d:e4: b7:3e:16:55:35:b2:a7:33:b6:cb:8e:bf:b2:2e:78:83:14:f7: dd:0b:89:98:ba:ee:c3:78:db:4a:71:be:3f:fd:1e:e9:bd:2d: 44:cb:09:d9:ad:91:61:51:a8:33:33:af:49:5f:61:31:78:ec: af:5b:ef:5c:a8:48:1b:32:3a:04:5a:1a:65:8c:b5:9e:9f:72: c2:c6:6a:48:eb:db:63:e5:cb:bb:d5:77:4f:05:fa:97:c6:82: b8:3a:f0:92:23:c6:bb:da:c1:68:8d:99:42:46:38:f2:7c:02: fd:17:30:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOLijBaQixCmMJg0vliwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjE4OGEwNGJiNDVkNGVlNzRjNDRkYzc2ZDcxZmZmYmRj MDRmNjAwHhcNMjUxMjIyMDQwMjA2WhcNMjUxMjIzMDQwMjA2WjAzMTEwLwYDVQQD EyhmNDJmNTc0N2Y0MDUwODIyYTg4NzllN2EwZTZhOWIxOTc5ZGNkNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K4XauLLXraAhgI9Z2I0+DvfGS66 SBuk6WHM00/9M2QBJJ+6uwkclSwgTFeYhDbakLa0XXShUpI3i+6h5KY4aQSPXsiG 4sTujFDQ2Qh+kRCvgDP+zfSleEs/cvQIDGNfi/lpojMj43NqjcHUK5f8ti7u/tbB BJN/a9u6a714Vj9QCj0RFGAQyLXOW8UD162fNmeKEPsYm4P8Dw3EafjcclvVETii H1S871i44yJIrWyhxiRtaOQsE9qL3gMl3H7r5EoPmIsfu31m54R0CWpltl4RBcpZ 3enH39CGzyddphqTgkHu08vTlAhewMI38Se23LfKxOhVS+lrmytM3TGSywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQvV0f0BQgiqIeeeg5qmxl53NarMB8GA1UdIwQY MBaAFJrxiKBLtF1O50xE3HbXH/+9wE9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEt NjU5YjRjY2Q3ZjRhLzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEtNjU5YjRjY2Q3ZjRh LzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACA14dCMn Anb9NTXqL78r6BRo79qa2Q3trj1pj87+ml3WnF6IpIJr9cosEPpBGVRTpkXc+6oO AUP8jjCvOKfA639oftQzjG5Xl8gLUSLHpSnvthPXVC0RNIagkSzWnoZOzvtTT6D8 E5uj6dMFEgCbPeGfs0LQM8Fl6v7AfV3lADFvFTS4NZZxNP+VdlZQLT3ktz4WVTWy pzO2y46/si54gxT33QuJmLruw3jbSnG+P/0e6b0tRMsJ2a2RYVGoMzOvSV9hMXjs r1vvXKhIGzI6BFoaZYy1np9ywsZqSOvbY+XLu9V3TwX6l8aCuDrwkiPGu9rBaI2Z QkY48nwC/RcwNw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:28 2025 by rpki-client